In OAuth 2.0, the contents of an access token is unique to the client that it is being used by. Although an token has information about the client assigned to it, a token also has meta information. This meta data contains information like, is the token valid?, valid scopes and even sometimes, what the token is being used for.
Token Introspection is a method for a protected resource to query an OAuth 2.0 authorization server to determine the active state of an OAuth 2.0 token and to determine meta-information about this token. OAuth 2.0 deployments can use this method to convey information about the authorization context of the token from the authorization server to the protected resource.
Starting with WP OAuth Server 4.0, Token Introspection is supported.
The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.